Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/34352e3136362e32352e302f32342d3234203d3e20323637393530.roa
File:                     34352e3136362e32352e302f32342d3234203d3e20323637393530.roa (raw, json)
Hash identifier:          pYV503YC6uOdvaCeq/xVgOrxlnnqlCqgthqtMnoVJJQ=
Subject key identifier:   AA:56:01:15:02:A9:AF:93:FA:4E:81:E2:53:16:5B:F9:B1:02:22:E3
Certificate issuer:       /CN=DBCD6820E048E145381B6BF0329F650ED78C7452
Certificate serial:       74F9DBFB38EB4B3D8B7CD869245477C785AA373F
Authority key identifier: DB:CD:68:20:E0:48:E1:45:38:1B:6B:F0:32:9F:65:0E:D7:8C:74:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCD6820E048E145381B6BF0329F650ED78C7452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/34352e3136362e32352e302f32342d3234203d3e20323637393530.roa
Signing time:             Thu 28 Aug 2025 13:44:24 +0000
ROA not before:           Thu 28 Aug 2025 13:39:24 +0000
ROA not after:            Thu 27 Aug 2026 13:44:24 +0000
asID:                     267950
IP address blocks:        45.166.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/DBCD6820E048E145381B6BF0329F650ED78C7452.crl
                          rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/DBCD6820E048E145381B6BF0329F650ED78C7452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCD6820E048E145381B6BF0329F650ED78C7452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f9:db:fb:38:eb:4b:3d:8b:7c:d8:69:24:54:77:c7:85:aa:37:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBCD6820E048E145381B6BF0329F650ED78C7452
        Validity
            Not Before: Aug 28 13:39:24 2025 GMT
            Not After : Aug 27 13:44:24 2026 GMT
        Subject: CN=AA56011502A9AF93FA4E81E253165BF9B10222E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:55:11:d8:cf:dc:7c:f3:06:38:b7:6b:10:
                    d3:e9:10:ee:96:6e:14:59:8d:17:1e:84:d3:df:fe:
                    bb:c2:18:7a:24:0e:4e:43:51:79:d5:84:ae:4a:d7:
                    3e:96:38:b8:20:e4:70:37:9b:e0:b2:b6:22:80:6c:
                    7d:c7:a8:f2:3e:5a:dd:a1:dc:dc:ea:f3:60:bb:90:
                    b3:bb:76:8b:4a:09:ba:28:44:38:59:4d:7c:ee:d5:
                    2c:e0:59:4f:c8:c9:40:36:60:59:f8:f8:7d:4e:0d:
                    c5:fc:67:eb:46:77:fc:3f:87:27:52:16:88:ff:f6:
                    4f:d4:8a:a1:e5:3b:7d:a3:fa:2e:63:cb:40:43:6a:
                    c9:01:d9:98:5c:f8:a4:7b:4f:99:66:5b:47:ad:ff:
                    91:1b:88:5c:b1:81:97:04:85:1a:8e:77:da:a8:30:
                    14:41:b4:e8:a2:af:d2:09:9e:de:31:ef:56:96:97:
                    e8:d1:7f:85:9e:a7:e1:c9:25:a9:06:7e:c1:4e:27:
                    e2:46:d1:43:c1:ba:b4:1b:ed:ae:01:8a:85:d4:81:
                    52:e1:8e:80:73:78:b4:d7:7c:fd:c5:f1:35:42:c7:
                    eb:2f:67:60:43:a2:05:72:69:c8:65:f8:48:dc:41:
                    d5:46:8a:7f:cf:64:b0:19:97:04:3d:59:dd:13:c9:
                    8b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:56:01:15:02:A9:AF:93:FA:4E:81:E2:53:16:5B:F9:B1:02:22:E3
            X509v3 Authority Key Identifier:
                keyid:DB:CD:68:20:E0:48:E1:45:38:1B:6B:F0:32:9F:65:0E:D7:8C:74:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/DBCD6820E048E145381B6BF0329F650ED78C7452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCD6820E048E145381B6BF0329F650ED78C7452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/1/34352e3136362e32352e302f32342d3234203d3e20323637393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:0c:92:77:94:f5:0e:e4:e0:e1:bd:9b:cf:f2:aa:e9:be:93:
         00:6b:ce:c8:d3:de:21:06:fd:52:5a:81:6b:49:39:3f:4d:ee:
         53:a1:f6:39:8b:07:e0:49:cc:68:80:00:41:45:53:1e:ac:14:
         fc:e8:3b:1b:6f:cc:01:14:92:9e:aa:9c:fa:86:83:25:dc:18:
         e2:61:d5:3a:44:3b:49:52:df:80:22:31:bc:b4:bf:84:e1:3a:
         fe:f3:e9:16:9b:ba:df:8b:e3:61:7a:98:a4:30:73:45:a6:de:
         75:64:ae:2f:c3:38:55:31:8d:81:57:b7:fa:d8:bb:2e:2e:68:
         b4:90:3f:fe:2b:a5:e6:7b:62:df:54:2e:65:8c:a5:f9:85:91:
         be:3b:95:62:9a:71:88:2f:dd:b9:8d:ad:27:76:0f:76:5b:ff:
         f0:f1:be:c2:05:5f:cd:6b:bb:85:cd:86:0f:79:71:94:d7:a2:
         a0:c3:5a:27:3b:f3:65:f0:c9:99:89:7b:44:85:35:09:59:a2:
         77:a6:8a:d1:3c:d6:1c:78:17:ec:e0:af:9f:5f:7a:05:12:f1:
         11:ec:e0:1c:19:41:84:5a:13:7d:f1:ca:b9:6d:71:ff:bd:5e:
         85:1f:a0:44:a1:8d:4f:c1:3a:fc:fb:0a:78:a0:74:52:7d:a8:
         80:8f:95:7c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdPnb+zjrSz2LfNhpJFR3x4WqNz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDRDY4MjBFMDQ4RTE0NTM4MUI2QkYwMzI5RjY1MEVE
NzhDNzQ1MjAeFw0yNTA4MjgxMzM5MjRaFw0yNjA4MjcxMzQ0MjRaMDMxMTAvBgNV
BAMTKEFBNTYwMTE1MDJBOUFGOTNGQTRFODFFMjUzMTY1QkY5QjEwMjIyRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxlUR2M/cfPMGOLdrENPpEO6W
bhRZjRcehNPf/rvCGHokDk5DUXnVhK5K1z6WOLgg5HA3m+CytiKAbH3HqPI+Wt2h
3Nzq82C7kLO7dotKCbooRDhZTXzu1SzgWU/IyUA2YFn4+H1ODcX8Z+tGd/w/hydS
Foj/9k/UiqHlO32j+i5jy0BDaskB2Zhc+KR7T5lmW0et/5EbiFyxgZcEhRqOd9qo
MBRBtOiir9IJnt4x71aWl+jRf4Wep+HJJakGfsFOJ+JG0UPBurQb7a4BioXUgVLh
joBzeLTXfP3F8TVCx+svZ2BDogVyachl+EjcQdVGin/PZLAZlwQ9Wd0TyYs7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqlYBFQKpr5P6ToHiUxZb+bECIuMwHwYDVR0j
BBgwFoAU281oIOBI4UU4G2vwMp9lDteMdFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYVUt1ektGa2VKcFIzSHdSOENlMWloRXhQZksyNmRjVWR6M0JzZUZn
RncvMS9EQkNENjgyMEUwNDhFMTQ1MzgxQjZCRjAzMjlGNjUwRUQ3OEM3NDUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQ0Q2ODIwRTA0OEUxNDUz
ODFCNkJGMDMyOUY2NTBFRDc4Qzc0NTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWFVLdXpLRmtlSnBSM0h3UjhDZTFpaEV4UGZLMjZkY1VkejNCc2VGZ0Z3LzEv
MzQzNTJlMzEzNjM2MmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaYZMA0GCSqGSIb3DQEBCwUAA4IBAQABDJJ3lPUO
5ODhvZvP8qrpvpMAa87I094hBv1SWoFrSTk/Te5TofY5iwfgScxogABBRVMerBT8
6Dsbb8wBFJKeqpz6hoMl3BjiYdU6RDtJUt+AIjG8tL+E4Tr+8+kWm7rfi+Nhepik
MHNFpt51ZK4vwzhVMY2BV7f62LsuLmi0kD/+K6Xme2LfVC5ljKX5hZG+O5VimnGI
L925ja0ndg92W//w8b7CBV/Na7uFzYYPeXGU16Kgw1onO/Nl8MmZiXtEhTUJWaJ3
porRPNYceBfs4K+fX3oFEvER7OAcGUGEWhN98cq5bXH/vV6FH6BEoY1PwTr8+wp4
oHRSfaiAj5V8
-----END CERTIFICATE-----
Generated at Fri Sep 19 04:18:34 2025 by rpki-client